IntroductionOn March 31, 2026, Anthropic accidentally exposed the full source code of Claude Code (its flagship ...
Malicious LiteLLM 1.82.7–1.82.8 via Trivy compromise deploys backdoor and steals credentials, enabling Kubernetes-wide ...
Two versions of LiteLLM, an open source interface for accessing multiple large language models, have been removed from the ...
Threat actors abused trusted Trivy distribution channels to inject credential‑stealing malware into CI/CD pipelines worldwide ...
Anthropic's AI coding assistant's source code leaked, prompting swift copyright takedowns on GitHub. However, one engineer ...
A routine software update for Anthropic's Claude Code tool accidentally leaked its entire source code, sparking rapid ...
Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...
The compromised packages, linked to the Trivy breach, executed a three‑stage payload targeting AWS, GCP, Azure, Kubernetes ...
A North Korea-nexus threat actor compromised the widely used axios npm package, delivering a cross-platform remote access ...
On X, Shou linked to a zip file with the leaked code. He is the CTO of Fuzzland and a dropout of the UC Berkeley Ph.D.
Anthropic is scrambling to contain the leak, but the AI coding agent is spreading far and wide and being picked apart.
The TeamPCP hacking group has been using credentials stolen in the recent OSS campaign to enumerate and compromise AWS ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results